From: Michael Tremer Date: Thu, 18 Apr 2024 21:11:40 +0000 (+0000) Subject: firewall: Don't filter output INVALID packets X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=be2774c0c686f28c447a661e06a6d7df7f362a55;p=people%2Fmfischer%2Fipfire-2.x.git firewall: Don't filter output INVALID packets This should never cause any problems, but will cause that certain more complicated featured like SYNPROXY won't work. Signed-off-by: Michael Tremer --- diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index d14466ef0..054d58c01 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -156,7 +156,6 @@ iptables_init() { iptables -N CTOUTPUT iptables -A CTOUTPUT -m conntrack --ctstate ESTABLISHED -j ACCEPT - iptables -A CTOUTPUT -m conntrack --ctstate INVALID -j CTINVALID iptables -A CTOUTPUT -p icmp -m conntrack --ctstate RELATED -j ACCEPT # Restore any connection marks